KIANEWS Serious vulnerabilities have been identified in Unisoc system circuits
02. 06. 2022 Thursday / By: Robert Denes / The key / Exact time: BST / Print this page
C heck Point Research, which is responsible for Check Point security operations, has found a critical vulnerability in Unisoc's system circuits used in smartphones.
More specifically, the vulnerability lies in the firmware of the baseband processor that is part of the system circuit, that is, in practice, the modem responsible for mobile network connections. An attacker could exploit the vulnerability to prevent the device from connecting, and the vulnerability affects Unisoc 4G and 5G system circuits.
This is a very serious vulnerability, as Unisoc itself scores 9.4 / 10 on the criticality scale. As an example of exploiting the vulnerability, Check Point Research mentions, for example, that a hacker or the military could exploit the vulnerability to block communication in a particular location.
Check Point Research has notified Unisoc and Google of the vulnerability, saying that a vulnerability patch provided by Unisoc (CVE-2022-20210) will be included as part of the following Android security patches. China Unisoc's market share in smartphone system circuits has grown rapidly recently, reaching 11 percent by the end of 2021. Unisoc system circuits are most often found in the cheapest smartphones available on the market. Of the various phone brands, Unisoc system circuits are more widely used in Motorola, Nokia, and Realme devices, but many more. Smartphones with Unisoc system circuits are not very common overall in Finland, but some models are also sold in Finland - such as the Nokia G11 and Nokia G21, which were launched in 2022. The vulnerability now discovered is the second major discovery in Unisoc system circuits this year. Another security company has previously discovered a vulnerability in the Unisoc SC9863a system circuit that allows attackers to take control of a device and gain wide access to data.
Via Link
